{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,4]],"date-time":"2025-12-04T07:57:41Z","timestamp":1764835061557,"version":"3.46.0"},"reference-count":24,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,8,26]],"date-time":"2025-08-26T00:00:00Z","timestamp":1756166400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,8,26]],"date-time":"2025-08-26T00:00:00Z","timestamp":1756166400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,8,26]]},"DOI":"10.1109\/pst65910.2025.11268848","type":"proceedings-article","created":{"date-parts":[[2025,12,3]],"date-time":"2025-12-03T18:40:04Z","timestamp":1764787204000},"page":"1-7","source":"Crossref","is-referenced-by-count":0,"title":["A Longitudinal Look at GDPR Compliance"],"prefix":"10.1109","author":[{"given":"Brian","family":"Kim","sequence":"first","affiliation":[{"name":"The University of Texas at Austin,The Center for Identity,Austin,Texas,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yang Trista","family":"Cao","sequence":"additional","affiliation":[{"name":"The University of Texas at Austin,The Center for Identity,Austin,Texas,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"K. Suzanne","family":"Barber","sequence":"additional","affiliation":[{"name":"The University of Texas at Austin,The Center for Identity,Austin,Texas,USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3389685"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.29007\/zrzd"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104065"},{"key":"ref4","first-page":"112","article-title":"Privacy-Aware Data Disclosure for Personalized Online Services","volume-title":"2018 IEEE European Symposium on Security and Privacy (EuroS&P).","author":"Tesfay"},{"key":"ref5","article-title":"Automated analysis of privacy requirements for mobile apps","author":"Zimmeck","year":"2019","journal-title":"NDSS"},{"key":"ref6","first-page":"77","article-title":"Identifying the provision of contextual integrity in privacy policies","volume-title":"IEEE European Symposium on Security and Privacy Workshops (EuroS&PW)","author":"Shvartzshnaider"},{"key":"ref7","first-page":"1","article-title":"Coarse privacy norms versus detailed policy descriptions: Comparing user expectations and legal disclosure","volume-title":"Proceedings of the 2021 CHI Conference on Human Factors in Computing Systems.","author":"Kang"},{"key":"ref8","first-page":"531","article-title":"Polisis: Automated analysis and presentation of privacy policies using deep learning","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Harkous"},{"key":"ref9","first-page":"585","article-title":"PolicyLint: Investigating Internal Privacy Policy Contradictions on Google Play","volume-title":"28th USENIX security symposium (USENIX security 19)","author":"Andow"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3180445.3180447"},{"issue":"4","key":"ref11","first-page":"449","article-title":"PolicyChecker: Analyzing the GDPR Completeness of Mobile App Privacy Policies","volume-title":"Proceedings on Privacy Enhancing Technologies","volume":"2021","author":"Pandita"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3127519"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3417469"},{"year":"2020","key":"ref14","article-title":"Case C-311\/18: Data Protection Commissioner v. Facebook Ireland Ltd and Maximillian Schrems (Schrems II)"},{"year":"2020","key":"ref15","article-title":"Guidelines 4\/2019 on Article 25 Data Protection by Design and by Default, Version 2.0"},{"year":"2025","key":"ref16","article-title":"The sanctions issued by the CNIL"},{"year":"2021","key":"ref17","article-title":"More than 500 GDPR complaints on deceptive cookie banners"},{"year":"2014","key":"ref18","article-title":"Case C-131\/12: Google Spain SL and Google Inc. v. AEPD and Mario Costeja Gonz\u00e1lez"},{"year":"2020","key":"ref19","article-title":"Age Appropriate Design Code: A Code of Practice for Online Services"},{"year":"2022","key":"ref20","article-title":"Digital Services Act (EU) 2022\/2065"},{"year":"2024","key":"ref21","article-title":"Dark Patterns in Cookie Banners: CNIL issues formal notice to website publishers"},{"year":"2020","key":"ref22","article-title":"Guidance on Cookies and Other Tracking Technologies"},{"key":"ref23","first-page":"13","article-title":"Designing privacy policy text to improve readability and comprehension","volume-title":"Proceedings of the IEEE International Conference on Requirements Engineering (RE)","author":"Bhatia"},{"issue":"2","key":"ref24","first-page":"22","article-title":"PrivacyCheck: Automatic Compliance Evaluation of Privacy Policies Using AI","volume-title":"Proceedings on Privacy Enhancing Technologies (PoPETs)","volume":"2022","author":"Zimmeck"}],"event":{"name":"2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)","start":{"date-parts":[[2025,8,26]]},"location":"Fredericton, NB, Canada","end":{"date-parts":[[2025,8,28]]}},"container-title":["2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11268482\/11268814\/11268848.pdf?arnumber=11268848","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,4]],"date-time":"2025-12-04T07:53:46Z","timestamp":1764834826000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11268848\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,26]]},"references-count":24,"URL":"https:\/\/doi.org\/10.1109\/pst65910.2025.11268848","relation":{},"subject":[],"published":{"date-parts":[[2025,8,26]]}}}